From 73321c5974212b09e6f65313a1291601adaec735 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Mon, 1 Jul 2019 19:24:14 +0000 Subject: Fixes (#2816) * Unbreak gconf-editor * Add x11 none to curl.profile * Add x11 none to wget.profile * Add x11 none to dnscrypt-proxy.profile * Add tracelog to ssh-agent.profile * Add x11 none to aria2c.profile * Add x11 none to arch-audit.profile * Add x11 none to archaudit-report.profile --- etc/arch-audit.profile | 1 + etc/archaudit-report.profile | 1 + etc/aria2c.profile | 2 +- etc/curl.profile | 3 +-- etc/dnscrypt-proxy.profile | 3 +-- etc/gconf-editor.profile | 4 ++++ etc/ssh-agent.profile | 1 + etc/wget.profile | 3 +-- 8 files changed, 11 insertions(+), 7 deletions(-) diff --git a/etc/arch-audit.profile b/etc/arch-audit.profile index 2f08fa169..7d12df047 100644 --- a/etc/arch-audit.profile +++ b/etc/arch-audit.profile @@ -35,6 +35,7 @@ novideo protocol inet,inet6 seccomp shell none +x11 none disable-mnt private diff --git a/etc/archaudit-report.profile b/etc/archaudit-report.profile index 19c37f90e..f79633263 100644 --- a/etc/archaudit-report.profile +++ b/etc/archaudit-report.profile @@ -30,6 +30,7 @@ novideo protocol unix,inet,inet6 seccomp shell none +x11 none disable-mnt private diff --git a/etc/aria2c.profile b/etc/aria2c.profile index 3b9dfc365..6db82e9c1 100644 --- a/etc/aria2c.profile +++ b/etc/aria2c.profile @@ -14,7 +14,6 @@ include disable-exec.inc include disable-interpreters.inc include disable-passwdmgr.inc include disable-programs.inc -# include disable-xdg.inc caps.drop all ipc-namespace @@ -32,6 +31,7 @@ novideo protocol unix,inet,inet6,netlink seccomp shell none +x11 none # disable-mnt private-bin aria2c,gzip diff --git a/etc/curl.profile b/etc/curl.profile index d8282b972..3080f05e6 100644 --- a/etc/curl.profile +++ b/etc/curl.profile @@ -9,8 +9,6 @@ include globals.local noblacklist ${HOME}/.curlrc -blacklist /tmp/.X11-unix - include disable-common.inc include disable-exec.inc include disable-passwdmgr.inc @@ -33,6 +31,7 @@ novideo protocol inet,inet6 seccomp shell none +x11 none # private-bin curl private-cache diff --git a/etc/dnscrypt-proxy.profile b/etc/dnscrypt-proxy.profile index 169b23f5f..0a5ef6abc 100644 --- a/etc/dnscrypt-proxy.profile +++ b/etc/dnscrypt-proxy.profile @@ -9,8 +9,6 @@ include globals.local noblacklist /sbin noblacklist /usr/sbin -blacklist /tmp/.X11-unix - include disable-common.inc include disable-devel.inc include disable-exec.inc @@ -32,6 +30,7 @@ nou2f novideo protocol inet,inet6 seccomp.drop _sysctl,acct,add_key,adjtimex,clock_adjtime,delete_module,fanotify_init,finit_module,get_mempolicy,init_module,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioperm,iopl,kcmp,kexec_file_load,kexec_load,keyctl,lookup_dcookie,mbind,migrate_pages,modify_ldt,mount,move_pages,open_by_handle_at,perf_event_open,perf_event_open,pivot_root,process_vm_readv,process_vm_writev,ptrace,remap_file_pages,request_key,set_mempolicy,swapoff,swapon,sysfs,syslog,umount2,uselib,vmsplice +x11 none disable-mnt private diff --git a/etc/gconf-editor.profile b/etc/gconf-editor.profile index 1b84bf536..8d98eebbc 100644 --- a/etc/gconf-editor.profile +++ b/etc/gconf-editor.profile @@ -7,5 +7,9 @@ include gconf-editor.local # added by included profile #include globals.local +blacklist /tmp/.X11-unix + +ignore x11 none + # Redirect include gconf.profile diff --git a/etc/ssh-agent.profile b/etc/ssh-agent.profile index 55df45a87..15e2de9b0 100644 --- a/etc/ssh-agent.profile +++ b/etc/ssh-agent.profile @@ -27,5 +27,6 @@ notv protocol unix,inet,inet6 seccomp shell none +tracelog writable-run-user diff --git a/etc/wget.profile b/etc/wget.profile index 2d5c0c4d6..23c3c46ee 100644 --- a/etc/wget.profile +++ b/etc/wget.profile @@ -10,8 +10,6 @@ include globals.local noblacklist ${HOME}/.wget-hsts noblacklist ${HOME}/.wgetrc -blacklist /tmp/.X11-unix - include disable-common.inc include disable-exec.inc include disable-passwdmgr.inc @@ -33,6 +31,7 @@ novideo protocol unix,inet,inet6 seccomp shell none +x11 none # private-bin wget private-dev -- cgit v1.2.3-54-g00ecf